The Moonpot security record
As of 31 Oct 2026, The Moonpot has 1 audit report on Trustblock, by Hacken, dated 4 Jun 2026. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| The Moonpot Contracts | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
Findings37
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 2 |
| Medium | 1 | 1 | 3 |
| Low | 2 | 6 | 21 |
HighDefense Tax Calculation Inverted When USDC Is Token0The Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportHighNFT Transfers Reset Stored Round Data Due to Missing _extraData OverrideThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportMediumpendingLiquidityUsdc is Cleared Even When Liquidity Injection Does Not Consume all USDCThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportMediumquoteBuy Returns Zero TMP Output When USDC is currency0The Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportMediumRound Seed Can Be Overwritten by Duplicate VRF ResponsesThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowceilingTick is Not Validated Against Pool Tick SpacingThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowceilingTick Zero Check May Block Valid TickThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowClaim Functions Use Incorrect Custom Error for Zero roundIdThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowExternal Self-Calls in valueOf Add Gas OverheadThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowFloating PragmaThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncomplete PositionIdSet Event and Misleading Function NameThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowInconsistent Ownable PatternThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowInconsistent Type Usage for NFT CountsThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowInterface Function Not ImplementedThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowLack of Event Emission in freezeBaseURIThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowlpFee and tickSpacing Should Be ConstantsThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowMisleading Error Name in retryRoundRevealThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing Round ID Consistency Validation in setRoundThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowMissing State Validation in Round Lifecycle FunctionsThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowNo Floor Tick Validation Before SwapThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportShow 6 more
LowOwner Can DoS Protocol by Setting Insufficient VRF Callback Gas LimitThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowRedundant Errors and Event DeclarationsThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowRedundant Validation for VRF Coordinator AddressThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowsetVRFParams Does Not Allow Updating vrfConfirmationsThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowTEAPermuter Uses Fewer Feistel Rounds Than Tested ConfigurationThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportLowUnrestricted Maximum Defense Tax Allows Owner to Block All TMP SalesThe Moonpot Contracts · Hacken · 4 Jun 2026Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="the-moonpot"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us